CVE-2017-6906

An issue was discovered in SiberianCMS before 4.10.0. The vulnerability exists due to insufficient filtration of user-supplied data log passed to the "SiberianCMS-master/errors/500.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable...

PT-2017-17406

Name of the Vulnerable Software and Affected Versions SiberianCMS versions prior to 4.10.0 Description The issue is caused by insufficient filtration of user-supplied data passed to the "SiberianCMS-master/errors/500.php" URL, allowing an attacker to execute arbitrary HTML and script code in a...